Curated security research, vulnerabilities, advisories and tools for practitioners.

#postgresql

Security coverage tagged postgresql.

1.

CVE-2023-25157 PoC: GeoServer jsonArrayContains SQL injection to PostgreSQL RCE

tool | 2026-08-13 21:11 | CVE-2023-25157 | gist.github.com | original ↗ | #rce | #public-poc | #sql-injection

2.

CVE-2026-17543 PoC: PHP ext-pgsql SQL injection via backslash breakout

tool | 2026-08-06 17:05 | CVE-2026-17543 | github.com | original ↗ | #public-poc | #data-exposure | #php

3.

CVE-2026-9082: PostgreSQL SQL Injection in Drupal

vulnerability | Critical | Actively exploited | 2026-05-22 09:11 | CVE-2026-9082 | yeswehack.com | original ↗ | #active-exploitation | #sql-injection | #postgresql

4.

Attack arithmetic: how an integer overflow in PostgreSQL libpq leads to denial of service

research | 2026-03-10 14:00 | swarm.ptsecurity.com | original ↗ | #cloud | #memory-safety | #denial-of-service

5.

Announcing Xint Code

research | 2025-12-16 00:43 | theori.io | original ↗ | #ai-security | #cloud | #rce

6.

Enhancing JFrog Internal Operations with Near Zero Downtime Migration

blog | 2025-10-08 13:33 | jfrog.com | original ↗ | #postgresql | #jfrog | #sre

7.

Cooking an SQL Injection Vulnerability in Chef Automate

vulnerability | High | 2025-09-30 12:00 | CVE-2025-8868 | xbow.com | original ↗ | #vulnerability-research | #devops | #sql-injection

8.

Beyond CVEs: The Exploitation of Everyday Misconfigurations

blog | 2025-09-19 12:00 | wiz.io | original ↗ | #cloud-security | #postgresql | #misconfiguration

9.

Metabase Community Data Stack Report 2025

blog | 2025-09-03 00:05 | metabase.com | original ↗ | #ai-security | #postgresql | #metabase

10.

Soco404: Multiplatform Cryptomining Campaign Uses Fake Error Pages to Hide Payload

blog | 2025-07-23 12:00 | wiz.io | original ↗ | #cloud-security | #malware | #postgresql

11.

CPU_HU: Fileless cryptominer targeting exposed PostgreSQL with over 1.5K victims

blog | 2025-03-31 15:13 | wiz.io | original ↗ | #cloud-security | #postgresql | #database-security

12.

Sensing and blocking JavaScript SQL injection attacks

blog | 2025-03-04 00:00 | aikido.dev | original ↗ | #sql-injection | #web-security | #waf

13.

Prisma and PostgreSQL vulnerable to NoSQL injection? A surprising security risk explained

blog | 2025-02-14 00:00 | aikido.dev | original ↗ | #authentication-bypass | #postgresql | #nosql-injection

14.

Bypass Apache Superset restrictions to perform SQL injections

research | 2024-10-09 22:00 | blog.quarkslab.com | original ↗ | #sql-injection | #postgresql | #vulnerability

15.

MyBB <= 1.8.31: Remote Code Execution Chain

vulnerability | 2023-01-25 13:47 | swarm.ptsecurity.com | original ↗ | #rce | #sql-injection | #postgresql

16.

Simplified cloud deployment for Burp Suite Enterprise Edition

blog | 2021-03-26 14:40 | portswigger.net | original ↗ | #cloud | #aws | #product-update